Bonjour desole de te derange mais g un grave probleme avec total security si tu peux maider voila le rapport

List'em by g3n-h@ckm@n 1.0.3.2

updated on 25.09.2009 ::::: 23.54


Microsoft Windows [version 6.0.6000]


29/09/2009 21:53:50,16


Nom de l'h“te: PC-DE-SYLVIA
Nom du systŠme d'exploitation: Microsoftİ Windows VistaT dition Familiale Premium
Version du systŠme: 6.0.6000 N/A version 6000
Fabricant du systŠme d'exploitation: Microsoft Corporation
Configuration du systŠme d'exploitation: Station de travail autonome
Type de version du systŠme d'exploitation: Multiprocessor Free
Propri‚taire enregistr‚: sylvia
Organisation enregistr‚e: Hewlett-Packard
Identificateur de produit: 89578-OEM-7332157-00061
Date d'installation originale: 06/12/2007, 19:12:15
Heure de d‚marrage du systŠme: 29/09/2009, 13:50:34
Fabricant du systŠme: Hewlett-Packard
ModŠle du systŠme: Compaq Presario F700 Notebook PC
Type du systŠme: X86-based PC
Processeur(s): 1 processeur(s) install‚(s).
[01]˙: x64 Family 15 Model 104 Stepping 2 AuthenticAMD ~1600 MHz
Version du BIOS: Hewlett-Packard F.04 , 27/11/2007
R‚pertoire Windows: C:\Windows
R‚pertoire systŠme: C:\Windows\system32
P‚riph‚rique d'amor‡age: \Device\HarddiskVolume1
Option r‚gionale du systŠme: fr;Fran‡ais (France)
ParamŠtres r‚gionaux d'entr‚e: fr;Fran‡ais (France)
Fuseau horaire: (GMT+01:00) Bruxelles, Copenhague, Madrid, Paris
M‚moire physique totale: 1˙982 Mo
M‚moire physique disponible: 852 Mo
Fichier d'‚change˙: taille maximale: 4˙185 Mo
Fichier d'‚change˙: disponible: 2˙654 Mo
Fichier d'‚change˙: en cours d'utilisation: 1˙531 Mo
Emplacements des fichiers d'‚change: C:\pagefile.sys
Domaine: WORKGROUP
Serveur d'ouverture de session: \\PC-DE-SYLVIA
Correctif(s): 130 Corrections install‚es.
[01]: {E2F06614-9C1E-407C-B963-02DC339F7A0A}
[02]: {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
[03]: {5F7F6FFF-395D-480E-8450-64F385D82C5F}
[04]: {63193DF7-81DB-46C9-A908-06B2296AB87F}
[05]: {797AE457-BA17-4BBC-B501-25FB3A0103C7}
[06]: {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
[07]: {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
[08]: {C695B2BC-F337-4FE3-B0EB-A0918CCEC3B6}
[09]: {5F7F6FFF-395D-480E-8450-64F385D82C5F}
[10]: {63193DF7-81DB-46C9-A908-06B2296AB87F}
[11]: {797AE457-BA17-4BBC-B501-25FB3A0103C7}
[12]: {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
[13]: {D7C5B9DC-6E4C-4DEE-9A7B-4183DA4DC1C2}
[14]: KB905866
[15]: KB925255
[16]: KB925528
[17]: KB925902
[18]: KB929399
[19]: KB929550
[20]: KB929577
[21]: KB929615
[22]: KB929735
[23]: KB929761
[24]: KB929762
[25]: KB929763
[26]: KB929777
[27]: KB930163
[28]: KB930178
[29]: KB930857
[30]: KB931099
[31]: KB931174
[32]: KB931573
[33]: KB931621
[34]: KB932030
[35]: KB932471
[36]: KB932818
[37]: KB933579
[38]: KB933729
[39]: KB934237
[40]: KB934374
[41]: KB935652
[42]: KB936003
[43]: KB936021
[44]: KB936357
[45]: KB936479
[46]: KB936782
[47]: KB936825
[48]: KB937077
[49]: KB938127
[50]: KB938660
[51]: KB938952
[52]: KB939159
[53]: KB939165
[54]: KB940199
[55]: KB941202
[56]: KB941229
[57]: KB941568
[58]: KB941569
[59]: KB941600
[60]: KB941644
[61]: KB943055
[62]: KB943078
[63]: KB945553
[64]: KB946026
[65]: KB946456
[66]: KB947172
[67]: KB949939
[68]: KB905866
[69]: KB928089
[70]: KB929123
[71]: KB929427
[72]: KB929916
[73]: KB931213
[74]: KB931671
[75]: KB931768
[76]: KB931836
[77]: KB932246
[78]: KB933360
[79]: KB933566
[80]: KB933928
[81]: KB935280
[82]: KB935807
[83]: KB936824
[84]: KB937143
[85]: KB938123
[86]: KB938194
[87]: KB938371
[88]: KB938464
[89]: KB938979
[90]: KB941649
[91]: KB941651
[92]: KB942615
[93]: KB942624
[94]: KB942763
[95]: KB943302
[96]: KB943411
[97]: KB943899
[98]: KB944533
[99]: KB946041
[100]: KB948590
[101]: KB948881
[102]: KB950124
[103]: KB950125
[104]: KB950582
[105]: KB950762
[106]: KB950974
[107]: KB951066
[108]: KB951072
[109]: KB951376
[110]: KB951698
[111]: KB952287
[112]: KB953155
[113]: KB953733
[114]: KB954154
[115]: KB954211
[116]: KB954366
[117]: KB954459
[118]: KB954708
[119]: KB955020
[120]: KB955069
[121]: KB955519
[122]: KB956390
[123]: KB956391
[124]: KB956841
[125]: KB957095
[126]: KB957097
[127]: KB957321
[128]: KB958644
[129]: KB959108
[130]: KB959130
Carte(s) r‚seau: 2 carte(s) r‚seau install‚e(s).
[01]: NVIDIA nForce Networking Controller
Nom de la connexion˙: Connexion au r‚seau local
DHCP activ‚˙: Oui
Serveur DHCP˙: 172.20.230.15
Adresse(s) IP

[02]: Atheros AR5007 802.11b/g WiFi Adapter
Nom de la connexion˙: Connexion r‚seau sans fil
tat˙: Support d‚connect‚

Nom de l'image PID Nom de la sessio Num‚ro de s Utilisation
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 28 Ko
System 4 Services 0 13˙448 Ko
smss.exe 372 Services 0 552 Ko
csrss.exe 504 Services 0 4˙628 Ko
wininit.exe 556 Services 0 3˙196 Ko
csrss.exe 568 Console 1 9˙676 Ko
services.exe 604 Services 0 6˙208 Ko
lsass.exe 616 Services 0 2˙944 Ko
lsm.exe 624 Services 0 3˙680 Ko
winlogon.exe 716 Console 1 4˙672 Ko
svchost.exe 824 Services 0 6˙160 Ko
svchost.exe 896 Services 0 6˙400 Ko
svchost.exe 928 Services 0 40˙960 Ko
svchost.exe 1056 Services 0 10˙332 Ko
svchost.exe 1100 Services 0 92˙372 Ko
svchost.exe 1124 Services 0 79˙868 Ko
audiodg.exe 1188 Services 0 11˙632 Ko
SLsvc.exe 1228 Services 0 8˙176 Ko
svchost.exe 1268 Services 0 11˙132 Ko
svchost.exe 1432 Services 0 18˙044 Ko
aswUpdSv.exe 1584 Services 0 316 Ko
ashServ.exe 1632 Services 0 24˙024 Ko
spoolsv.exe 1864 Services 0 7˙428 Ko
avguard.exe 1888 Services 0 2˙180 Ko
svchost.exe 1904 Services 0 15˙960 Ko
sched.exe 744 Services 0 1˙040 Ko
svchost.exe 1244 Services 0 4˙168 Ko
RichVideo.exe 1592 Services 0 3˙348 Ko
SeaPort.exe 984 Services 0 9˙624 Ko
svchost.exe 2176 Services 0 5˙532 Ko
svchost.exe 2204 Services 0 2˙084 Ko
SearchIndexer.exe 2228 Services 0 20˙896 Ko
XAudio.exe 2328 Services 0 2˙084 Ko
hpqWmiEx.exe 2360 Services 0 4˙276 Ko
VMCService.exe 2392 Services 0 11˙776 Ko
taskeng.exe 2548 Console 1 4˙092 Ko
dwm.exe 2628 Console 1 67˙724 Ko
taskeng.exe 2664 Console 1 10˙344 Ko
explorer.exe 2700 Console 1 52˙076 Ko
tsc.exe 2728 Console 1 26˙168 Ko
WmiPrvSE.exe 2944 Services 0 11˙020 Ko
rundll32.exe 2968 Console 1 3˙876 Ko
rundll32.exe 2996 Console 1 5˙128 Ko
SynTPStart.exe 3004 Console 1 3˙976 Ko
QPService.exe 3076 Console 1 7˙192 Ko
ashMaiSv.exe 3116 Services 0 1˙232 Ko
QLBCTRL.exe 3136 Console 1 7˙188 Ko
WmiPrvSE.exe 3244 Services 0 5˙036 Ko
MSASCui.exe 3408 Console 1 9˙844 Ko
hpwuSchd2.exe 3472 Console 1 2˙568 Ko
ashWebSv.exe 3528 Services 0 3˙856 Ko
HPWAMain.exe 3536 Console 1 5˙492 Ko
WiFiMsg.exe 3556 Console 1 3˙852 Ko
jusched.exe 3572 Console 1 4˙452 Ko
apdproxy.exe 3640 Console 1 3˙640 Ko
avgnt.exe 3648 Console 1 2˙664 Ko
MobileConnect.exe 3668 Console 1 19˙444 Ko
ashDisp.exe 3736 Console 1 3˙976 Ko
sidebar.exe 3744 Console 1 8˙680 Ko
msnmsgr.exe 3800 Console 1 5˙580 Ko
ehtray.exe 3980 Console 1 1˙660 Ko
SynTPEnh.exe 3996 Console 1 5˙856 Ko
wmpnscfg.exe 2384 Console 1 4˙328 Ko
ehmsas.exe 3100 Console 1 3˙576 Ko
wmpnetwk.exe 1044 Services 0 7˙904 Ko
HpqToaster.exe 3512 Console 1 4˙688 Ko
HPHC_Service.exe 2976 Services 0 7˙448 Ko
ieuser.exe 5004 Console 1 12˙536 Ko
AolTbServer.exe 4456 Console 1 6˙840 Ko
wltuser.exe 2524 Console 1 7˙312 Ko
iexplore.exe 5908 Console 1 82˙796 Ko
iexplore.exe 4316 Console 1 117˙228 Ko
taskeng.exe 5404 Services 0 5˙176 Ko
SearchProtocolHost.exe 4124 Services 0 8˙624 Ko
SearchFilterHost.exe 2588 Services 0 4˙504 Ko
List_Killem.exe 4344 Console 1 6˙392 Ko
conime.exe 5700 Console 1 3˙472 Ko
cmd.exe 4388 Console 1 2˙540 Ko
WmiPrvSE.exe 5356 Services 0 5˙128 Ko
TrustedInstaller.exe 6100 Services 0 23˙984 Ko
tasklist.exe 5680 Console 1 4˙560 Ko

Infections :
==========


¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"
"C:\Program Files\GamesBar"

¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

¤¤¤¤¤¤¤¤¤¤ C:\Windows\Prefetch :

ACRORD32.EXE-89736734.pf
ADOBEUPDATER.EXE-D873744E.pf
AgAppLaunch.db
AgCx_S1_S-1-5-21-1681742822-2173173852-823250016-1000.snp.db
AgCx_SC1.db
AgCx_SC1.db.trx
AgCx_SC2.db
AgCx_SC3_0F2850F7.db
AgGlFaultHistory.db
AgGlFgAppHistory.db
AgGlGlobalHistory.db
AgGlUAD_P_S-1-5-21-1681742822-2173173852-823250016-1000.db
AgGlUAD_S-1-5-21-1681742822-2173173852-823250016-1000.db
AgRobust.db
AOLTBSERVER.EXE-2F1E4D28.pf
ASHAVAST.EXE-C2026BF7.pf
ASHCHEST.EXE-B7CFB89F.pf
ASHMAISV.EXE-6E148274.pf
ASHSIMPL.EXE-42006B25.pf
ASHWEBSV.EXE-ABC7BAA7.pf
ATBROKER.EXE-FF58B71D.pf
AVADMIN.EXE-E822D667.pf
AVAST.SETUP-11A05BC6.pf
AVAST.SETUP-84A5483F.pf
AVCENTER.EXE-F9302F97.pf
AVCONFIG.EXE-166DF4E0.pf
AVGNT.EXE-E101157F.pf
AVNOTIFY.EXE-3344516F.pf
AVSCAN.EXE-F988127B.pf
AVWSC.EXE-A384DC2B.pf
BCDEDIT.EXE-23D6A12E.pf
BRCLSMSG.EXE-4EFFE401.pf
CCLEANER.EXE-CC440CDB.pf
CCSETUP224.EXE-F939093A.pf
CMD.EXE-89305D47.pf
CODEC.SETUP_194.EXE-A44ADB19.pf
CONIME.EXE-B273009A.pf
CONSENT.EXE-65F6206D.pf
CONTROL.EXE-9459D5A0.pf
CSRSS.EXE-8C04D631.pf
DEFRAG.EXE-738093E8.pf
DFRGNTFS.EXE-4F838A89.pf
DLLHOST.EXE-71214090.pf
DLLHOST.EXE-893DDF55.pf
DLLHOST.EXE-8F3E119D.pf
DLLHOST.EXE-C5C55E89.pf
DLLHOST.EXE-D59299D2.pf
DRVINST.EXE-5F8E77CD.pf
DW20.EXE-F4A4A3C6.pf
DWM.EXE-AEABE78B.pf
DWWIN.EXE-EBDA23D8.pf
EHMSAS.EXE-6BE9D904.pf
EXPLORER.EXE-7A3328DA.pf
FIREWALLCONTROLPANEL.EXE-7F212016.pf
FIREWALLSETTINGS.EXE-59D9DF16.pf
FLASHUTIL10C.EXE-5DFF7861.pf
FREECELL.EXE-5A876790.pf
GETPRESTILE.EXE-BA07CB50.pf
HDWWIZ.EXE-C512B484.pf
HELPPANE.EXE-D1016F9E.pf
HPHC_SERVICE.EXE-B8B935C8.pf
HPQTOASTER.EXE-3B718527.pf
HPWUCLI.EXE-373855A7.pf
IEUSER.EXE-D895AB54.pf
IEXPLORE.EXE-1B894AFB.pf
JUCHECK.EXE-A596E8A2.pf
Layout.ini
LIST_KILLEM.EXE-2015D33F.pf
LOGON.SCR-7C80CA1C.pf
LOGONUI.EXE-1BEE4A84.pf
MAHJONG.EXE-D30A7F64.pf
MMC.EXE-348AF965.pf
MOBSYNC.EXE-D8BC6ED2.pf
MODE.COM-0F3F3F6D.pf
MPAS-FE_BD.EXE-DBA6D8E1.pf
MPCMDRUN.EXE-BB72ED6F.pf
MPSIGSTUB.EXE-89CA03A4.pf
MSASCUI.EXE-6465DB72.pf
MSNMSGR.EXE-DD43BBF4.pf
MSNTBUP.EXE-CB7798E4.pf
NOTEPAD.EXE-EB1B961A.pf
NTOSBOOT-B00DFAAD.pf
OPTIONCONVERTTOMODEM.EXE-B983AA36.pf
PfSvPerfStats.bin
PRESENTATIONFONTCACHE.EXE-42767AE9.pf
PRESENTATIONSETTINGS.EXE-6F4C5E34.pf
PREUPD.EXE-4F99113F.pf
ReadyBoot
REG.EXE-26976709.pf
REGSVR32.EXE-55A4EE79.pf
RUNDLL32.EXE-16B1DF16.pf
RUNDLL32.EXE-2E65B341.pf
RUNDLL32.EXE-34B17D05.pf
RUNDLL32.EXE-41E85287.pf
RUNDLL32.EXE-7ACEEE6A.pf
RUNDLL32.EXE-7BF4CE40.pf
RUNDLL32.EXE-82DA25E7.pf
RUNDLL32.EXE-8E6E3B62.pf
RUNDLL32.EXE-A908CA39.pf
RUNDLL32.EXE-C59AAAAD.pf
RUNDLL32.EXE-F452D79D.pf
SCHED.EXE-98844D43.pf
SEARCHFILTERHOST.EXE-AA7A1FDD.pf
SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf
SERVICES.EXE-2260497F.pf
SETUP.EXE-7FD554E6.pf
SETUP.EXE-C9C2CA7B.pf
SETUPFRE.EXE-5D60697D.pf
SMSS.EXE-1DCD0EB1.pf
SNDVOL.EXE-783DCB11.pf
SOLITAIRE.EXE-CB7A6274.pf
SVCHOST.EXE-8FD92526.pf
SYNTPENH.EXE-4361DC86.pf
SYSTEMINFO.EXE-F360EB78.pf
TASKENG.EXE-5BAF290C.pf
TASKLIST.EXE-9811F41E.pf
TRUSTEDINSTALLER.EXE-031B6478.pf
TSC.EXE-E7441506.pf
UPDATE.EXE-196C0F6E.pf
USERINIT.EXE-F39AB672.pf
VERCLSID.EXE-4D95F5A7.pf
VSSVC.EXE-04D079CC.pf
WERCON.EXE-FE5CD389.pf
WERMGR.EXE-2A1BCBC7.pf
WININIT.EXE-65FCAECD.pf
WINLOGON.EXE-8163EECC.pf
WLCOMM.EXE-648065CA.pf
WLTUSER.EXE-A6CDB501.pf
WMIADAP.EXE-369DF1CD.pf
WMIPRVSE.EXE-43972D0F.pf
WMPLAYER.EXE-9DE758AE.pf
WMPNETWK.EXE-BD0344CA.pf
WUAUCLT.EXE-830BCC14.pf




¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤